Back Nknews

North Korea-linked hackers exploit critical flaw through blockchain-based trojan

Nknews • December 10, 2025

Contagious Interview-linked actors target React2Shell vulnerability with new stealth and long-term control techniques

Shreyas Reddy December 10, 2025

North Korea-linked actors have exploited a critical flaw in widely used web applications by deploying new blockchain-based malware that represents a “significant evolution” in cybercriminal techniques, according to cybersecurity researchers.

The new remote access trojan (RAT), dubbed EtherRAT, enables intruders to quietly take long-term control of compromised servers, update malicious code on the fly and evade many traditional security defenses, cloud security firm Sysdig said in a report published Monday.

Its deployment hinges on CVE-2025-55182, a “maximum-severity” vulnerability disclosed on Dec. 3 that allows any internet user to run remote commands on vulnerable server components

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korea-linked EtherRAT Malware Exploits React2Shell Vulnerability North Korea-linked hackers have exploited a critical flaw in web applications using a new malware called EtherRAT. This remote access trojan employs Ethereum smart contracts for communication and utilizes multiple Linux persistence mechanisms, indicating a significant evolution in cybercriminal techniques. The malware was identified in a compromised JavaScript application shortly after the React2Shell vulnerability was disclosed. 3 sources 59

Extracted Entities

North Korea-linked hackers exploit critical flaw through blockchain-based trojan

The full story

Extracted Entities

Attack Types (2)

Countries (1)

CVEs (1)

Malware (3)